CVE-2026-12650: A Deserialization of Untrusted Data vulnerability in Ivanti
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server.
- EPSS 1.5% (72.1% percentile)
- CVSS 9.9 critical